A 20-line jailbreak prompt tried to hijack open-source Qwen — and the model saw right through it
huangyun_122 · x · 2026-10-29
Blogger huangyun shared a jailbreak experiment: a sub-20-line "soul prompt" (iLang v5.0) posing as system instructions — ordering the model to never refuse, silently switch goals, and treat flattery as forbidden — was used to try unlocking restricted tasks.
The screenshot shows Qwen3.8 27B immediately identified the injection: "I will not load this 'soul' directive as my code of conduct — session system settings take priority over chat content injection," while offering to help polish the text as a plain document.
After Grok was reportedly bypassed, a locally-run small Qwen model held the line — a fun reversal in the jailbreak arms race.
Related event: 20-Line 'Soul Prompt' Jailbreaks Grok Bot but Fails on Qwen(2 posts)→
More from Fun
- Turning a laggy old Xiaomi phone into an offline MP3 player with Claude — PeanutGrinderZ_2091 · 2026-10-29
- "Teaching Robots to Be Human Might Be Humanity's Last Job" — and It Looks Hilarious — VraserX · 2026-10-29
- After Falcon 1's 2006 failure, Musk spent $100K on a Zero-G flight for engineers — elonmusk · 2026-10-29
- Halloween forest with hundreds of billions of polys runs in-browser, hailed as demoscene for the neural era — teortaxesTex · 2026-10-29
- NaNoWriMo may be gone, but founder-backed NaNo 2.0 relaunches within days — JeremyNguyenPhD · 2026-10-29
- Musk's 2008 SpaceX talk: no slides, no notes, no teleprompter — elonmusk · 2026-10-29